Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-4122

Student Information System v1.0 - Insecure File Upload

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.

CVSS 3.1 · 9.9 Critical EPSS 1.5% KEV · Not listed
Vendors
Imsurajghosh
Products
Student Information System
CVE-2023-5008

Student Information System v1.0 - Unauthenticated SQL Injection

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Imsurajghosh
Products
Student Information System